sync: Dataforth sync fixes, TestDataDB stability, and client scripts

Dataforth DOS:
- TestDataDB: singleton DB connection fix (crash prevention), WAL mode,
  WinSW service config, backup script, uncaught exception handlers
- Sync-FromNAS.ps1: Get-NASFileList temp file approach to avoid SSH
  stdout deadlock, *> $null output suppression, 8.3 filename filter
  for PUSH phase, backslash-escaped SCP paths, rename-to-.synced
- import.js: INSERT OR REPLACE for re-tested devices
- Full import run: 1,028,275 -> 1,632,793 records, indexes added
- Deploy script for sync fixes to AD2

Client scripts (temp/):
- BG Builders: Lesley account check, MFA phone update
- Lonestar Electrical: Kyla/Russ Google Workspace setup, 2FA bypass
- AD2 diagnostics and NAS connectivity tests

PENDING: Investigate why newest test_date is Jan 19 despite daily tests

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

temp/lonestar-kyla-reset2.py

@@ -0,0 +1,25 @@
+"""Reset password for office@lonestarelectrical.net - attempt 2, no force change"""
+from google.oauth2 import service_account
+from googleapiclient.discovery import build
+
+SCOPES = ['https://www.googleapis.com/auth/admin.directory.user']
+
+creds = service_account.Credentials.from_service_account_file(
+    'temp/acg-msp-access-8f72339997e5.json', scopes=SCOPES
+)
+delegated = creds.with_subject('sysadmin@lonestarelectrical.net')
+service = build('admin', 'directory_v1', credentials=delegated)
+
+user_email = 'office@lonestarelectrical.net'
+new_pass = 'LoneStar2026!!'
+
+service.users().update(
+    userKey=user_email,
+    body={
+        'password': new_pass,
+        'changePasswordAtNextLogin': False,
+    }
+).execute()
+
+print(f"[OK] Password reset for {user_email}")
+print(f"Password: {new_pass}")